NVIDIA OpenShell
ActifNVIDIA's open-source runtime that sandboxes autonomous AI agents under enforced policy
OpenShell is NVIDIA's free, Apache-2.0 runtime that sandboxes autonomous agents with kernel-level file, syscall and network policy, injects credentials only for approved endpoints, and checks policy changes before you approve them. Conditional because it is at 0.1.x, Windows runs through WSL 2 and is marked experimental, and anonymous telemetry is on by default. Right for teams that want to trial policy-enforced agent isolation on Linux or Apple Silicon; we have not tested it.
Isolation runtime that hosts third-party agents under enforced policy; the pages read describe no model loop of its own.
Est-ce fait pour vous ?
Recommandé pour
- Bounding what an agent can touch: kernel-level controls restrict file access, system calls and network connections per declared policy
- Keeping real credentials away from the agent: they are added only to requests bound for approved endpoints
- Reviewing permission changes: policy changes are verified to flag risky new access before approval, with human review for sensitive ones
- Running many sandboxes under one control plane: gateways manage sandboxes and policies, with Helm deployment on Kubernetes and SDKs for Python, TypeScript, Go and Rust
Déconseillé pour
- A production dependency today: the project is at 0.1.x, with v0.1.0 published on GitHub on September 25, 2026
- Windows-first teams: Windows is supported through WSL 2 and marked experimental
- Environments that cannot allow telemetry: anonymous operational telemetry is on by default and must be turned off with an environment variable
- A ready-to-run agent: the default sandbox image is a minimal Ubuntu with no agent in it
Notre expérience
Tarifs
Open source- Apache License 2.0
- Self-hosted via install script or Helm on Kubernetes
- No paid tier on the pages we read
Aucun changement de verdict pour l’instant
L’horloge tourne dès le premier jour : les changements apparaîtront ici à mesure que notre verdict évolue.
Sources
Journal de vérification
- Profil· Aucun changement
Agent automatisé
Vous le voulez en marche dans votre entreprise ?
Nous avons testé cet outil et nous construisons avec des outils comme lui chaque jour. Dites-nous le flux de travail : nous l’installons, nous l’intégrons et nous vous le livrons fonctionnel.
La conversation tourne sur Gnosari, l’un des outils de ce répertoire. Une vraie conversation, pas un script de vente.